IT Security Engineer

SR2 | Socially Responsible Recruitment | Certified B Corporation™; England; Hybrid; GBP 45,000 - 50,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance

Permanent health insurance

Staff discount

Interest-free loan scheme

Sports & social club

Job summary

A UK-based cybersecurity organization is seeking an IT Security Engineer to enhance cyber resilience. Responsibilities include monitoring vulnerabilities, supporting patching activities, and working collaboratively with technical teams. Candidates should have over 3 years of experience in security operations, a strong grasp of risk management, and excellent communication skills. This role offers a salary range of £45–50k along with comprehensive benefits, including private medical insurance and a hybrid working pattern of 3 days on-site in Hertfordshire, 2 days remote.

Qualifications

• 3+ years in security operations or cybersecurity engineering.
• Strong understanding of vulnerability management processes.
• Experience in working with technical teams for remediation.

Responsibilities

• Own day-to-day vulnerability monitoring and remediation.
• Support patching and configuration hardening activities.
• Develop and maintain security playbooks.

Skills

Vulnerability management

Risk-based prioritisation

Email and endpoint security

IAM concepts (MFA, conditional access)

Clear communication with stakeholders

Tools

SIEM

Cloud security tools

Automation/scripting tools

Job description

IT Security Engineer (Hybrid: 3 days on-site in Hertfordshire / 2 days remote) | £45–50k | Permanent

SR2 is partnering with a well-established, member-owned UK organisation to hire an IT Security Engineer to strengthen cyber resilience and improve day-to-day security operations. This is a hands‑on role sitting within IT, working closely with infrastructure and support teams to embed security into BAU and projects.

What you’ll be doing

• Own day-to-day vulnerability monitoring and remediation, including maintaining a vulnerability register and tracking actions to closure
• Triage, categorise and prioritise vulnerabilities based on risk, exposure and business impact
• Support patching, configuration hardening and decommissioning activities to reduce risk exposure
• Monitor and respond to security alerts and incidents, contributing to investigation and improvement actions
• Help improve detection and response capability (more proactive monitoring and response workflows)
• Work with external providers (e.g., SOC / security vendors) to reduce high-priority risks
• Develop and maintain security playbooks (phishing, ransomware, account compromise, etc.)
• Provide security input into projects, changes and supplier reviews so security is built-in from the start
• Support audits / assessments (e.g., vulnerability assessments, pen tests, configuration benchmarks, PCI where relevant)
• Contribute to awareness initiatives and practical security guidance across the business
• Support progress against NIST CSF focus areas and maturity improvements

What we’re looking for

• 3+ years in security operations / cybersecurity engineering (or strong IT ops experience with security ownership)
• Strong understanding of vulnerability management processes and risk-based prioritisation
• Familiarity with email + endpoint security controls (e.g., Defender-style toolsets, phishing controls, email security)
• Awareness of IAM concepts: MFA, conditional access, privileged access/PIM
• Comfortable working with technical teams to get remediation delivered (patching cycles, change, infrastructure support)
• Clear communicator who can explain risk to both technical and non-technical stakeholders
• Bonus points for: SIEM exposure, threat hunting, cloud security, automation/scripting, infrastructure/networking

Package

• £45–50k salary range
• Private medical insurance, life assurance, permanent health insurance
• Staff discount, interest‑free loan scheme, sports & social club

Working pattern

• Hybrid: 3 days per week on-site in Hertfordshire, 2 days remote